Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/519d0f6d-4ac2-38ff-8041-2ee9d91f9e14.roa
File:                     519d0f6d-4ac2-38ff-8041-2ee9d91f9e14.roa (raw, json)
Hash identifier:          O9HAW/DgD0ETOTtqFuAAXi1JVHxNJAg0LQ11K3FHXH0=
Subject key identifier:   35:A0:D9:23:AD:0A:64:F9:56:67:84:9D:19:22:80:4C:40:FF:97:45
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E2D9F129058E3A9616F41E880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/519d0f6d-4ac2-38ff-8041-2ee9d91f9e14.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     21342
IP address blocks:        2600:1405:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:12:90:58:e3:a9:61:6f:41:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=7ecbe828-8b50-44f7-9eab-27e3b6504854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:af:4b:b4:ba:85:7b:21:79:e0:f3:05:b4:
                    e2:63:e7:7e:0e:c1:5c:2d:99:13:ea:76:5c:c6:76:
                    64:b3:a0:7b:91:61:9c:1c:f0:f1:59:54:85:e9:67:
                    cc:fc:dc:3b:c7:a2:f8:51:36:62:62:fc:e3:c8:0e:
                    df:f9:45:a9:95:ac:c7:7b:23:3c:4a:6c:ca:db:33:
                    32:f8:12:5c:44:65:5a:0c:ef:66:46:7e:97:fb:c4:
                    97:38:6f:01:e1:1e:4c:26:e8:4a:c9:d9:54:84:5e:
                    03:51:be:7c:6f:8c:09:11:52:6f:2b:0d:a3:94:88:
                    6e:c6:8d:d6:2e:4a:fc:4c:58:62:93:95:77:cf:7e:
                    b2:2f:b4:d2:27:9a:49:81:a7:4d:3f:3d:f9:d3:6e:
                    6c:a9:88:fc:a1:7e:ee:45:e9:75:06:67:d7:42:da:
                    60:b1:56:a3:a5:1a:17:a2:dd:98:0c:17:43:88:85:
                    75:cc:a4:77:c3:8e:fe:2b:89:a5:59:25:0a:7d:66:
                    db:e3:2a:f1:3f:25:a6:cb:9c:86:5b:d0:cd:5d:db:
                    3e:83:4f:1c:14:7d:5a:f8:0f:a3:67:b1:a8:06:25:
                    25:cd:3f:f4:cd:ba:4a:9c:91:44:db:89:1b:99:34:
                    33:f4:81:8e:53:e7:7b:bc:76:58:d1:da:7f:1c:38:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A0:D9:23:AD:0A:64:F9:56:67:84:9D:19:22:80:4C:40:FF:97:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/519d0f6d-4ac2-38ff-8041-2ee9d91f9e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d6:72:bd:cc:7e:b5:42:c2:a1:be:42:3b:da:52:e5:d9:39:
         4e:d0:bd:2e:66:e5:c5:2e:bc:9a:53:8d:f6:d8:7e:2d:a5:71:
         00:ab:21:e3:05:5c:ed:3c:6b:2a:5d:79:45:4e:25:fc:5a:33:
         d3:d3:51:82:f5:0c:76:4d:f6:65:5c:32:50:cb:48:c1:39:ed:
         c6:ce:4a:27:84:db:55:48:70:7f:a1:7f:55:61:0d:fa:5a:41:
         c8:50:df:a7:be:e3:b1:f4:b3:67:0c:bf:89:bb:b2:3e:df:ed:
         e2:4e:e1:01:d2:76:c1:81:e0:38:79:49:d6:2e:47:2f:31:53:
         18:18:5b:94:95:80:ea:34:9e:05:bb:f3:09:0b:48:1e:d8:ce:
         18:c9:f8:f3:c4:06:21:c5:9e:00:b4:28:b4:ca:c7:7a:c0:81:
         5b:f0:fb:9a:07:6a:ee:f5:84:87:24:f3:f3:9f:73:f0:ce:ae:
         96:1f:f7:c5:54:1e:c5:1b:11:c9:a2:3e:9e:18:e4:17:ff:2f:
         9a:9e:76:3d:8b:e7:bc:42:80:f0:fc:d2:11:0f:b4:5b:ac:ea:
         ca:49:7e:55:37:11:86:fe:6e:9c:90:b7:ed:24:e5:7b:cb:0f:
         46:02:56:31:17:8b:51:27:a8:d0:6f:7c:7d:17:cd:59:19:8f:
         28:34:65:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:44:28 2026 by rpki-client